Security Technologist with E-Business Systems

Job Specifications:
Requires 5-7 years of relevant experience in a multi-platform and networked environment. A 4-year degree in MIS, business, or engineering is preferred. MCSE, GIAC, CISSP certifications are preferred. Experience in application development, code reviews and/or database is a plus. This technologist must be a quick learner and be able to analyze the security components of complex multi-layered computer systems (applications layer, middleware layer, and infrastructure layer). This technologist must have an understanding of technical and process security controls and their appropriate incorporation into Business and E-Business systems. Strong impact and influence skills are required. A focus on teamwork and the ability to escalate unresolved issues to management in both technical and non-technical terms required.

Knowledge of and experience with:
• Windows 2003 and Windows 2000 server platforms
• Common Internet protocols and their vulnerabilities: HTTP; HTTPS; FTP, Telnet, SMTP, ICMP, SNMP
• Secure use of load balancing & clustering
• Techniques and tools used to secure/ harden a server’s operating system and applications running on the server
• Secure system development lifecycle process
• Information risk management analysis process: information asset identification, threat and vulnerability analysis, technical and process control evaluation
• Advanced ability to troubleshoot and solve complex problems relating to multi-layered computer systems
• Advanced oral and written presentation skills
• Advanced skill in the development of security standards and operational processes as well as the ability to effectively document the information as an Enterprise standard


Knowledge of and experience with the following are a plus:
• Fundamentals of application development and code review techniques
• Digital certificates
• Securing E-Commerce Implementations and the following technologies: Java Servlets, WebLogic Web Sphere, IIS, Application Center, BizTalk Server, SharePoint Portal, etc.
• SQL database security concepts
• Leadership skills to support knowledge transfer of Enterprise and IT security strategy and process
• Security technologies: encryption, cryptography, public key infrastructure (PKI), firewall services and features, proxy, virtual private networks (VPN), remote access connectivity solutions such as dial-up, ISDN, and RAS, and intrusion detection systems.
• Email systems: Lotus Notes, Exchange, and Simple Mail Transfer Protocal (SMTP)
• Project management concepts and skills
• Windows2000 Intellimirror and Group Policy
• Secure solutions and techniques for data migration
• Experience with Sarbanes-Oxley legislation and COBIT controls relating to securing applications.